Actually in the case of this template (historically) the use of the megamenu as "was" that included a dropdown contact us option with no honeypot was frequently an issue for spam. Now, that said, no amount of protection will prevent the attempt to spam that was initialy reported. There are several references and discussion in this thread alone about what can be done to prevent/minimize the amount of spam. The typical reason that it continues although the contact us menu option has been "hidden" is that only css was used and nothing programatic has been done to correct the situation. (script kiddies, etc. don't pay attention to css "hiding" attempts.)
Also while recaptcha, etc. may work well on a standard contact us screen, it doesn't work well (visually) on a responsive screen version of the dropdown because either it doesn't fit on screen or when reducing the size only makes it more difficult for real people to be able to read/enter the data requested.
Bookmarks